Behavioral task
behavioral1
Sample
2c6d08d6356db9afa7c5a1c11cd492e6dbbaf94c102369f97a8e76c6b0b1f1cc.exe
Resource
win7-20220812-en
General
-
Target
2c6d08d6356db9afa7c5a1c11cd492e6dbbaf94c102369f97a8e76c6b0b1f1cc
-
Size
23KB
-
MD5
3f0f0c5c5f6af57c83fa9f2bda8c5a90
-
SHA1
75879fdad10aa27ef6536c4862d13e8886b00b4b
-
SHA256
2c6d08d6356db9afa7c5a1c11cd492e6dbbaf94c102369f97a8e76c6b0b1f1cc
-
SHA512
0c8666a5c3451883e0514a494762c9dd8cf426e83b95f7c93dd87b3859ea656446816bd280d86e6ce43cae2e5d82ade920a55dd124bd8503a718f9617052f010
-
SSDEEP
384:9Y324bcgPiJLQrfARGSRUJsbY6ZgvSMBD3tVmRvR6JZlbw8hqIusZzZTFs:yL2s+tRdRpcnuB
Malware Config
Extracted
njrat
0.7d
HacKed
65.111.173.161:5553
e53c2094b374cef22ce826a35f8e9bac
-
reg_key
e53c2094b374cef22ce826a35f8e9bac
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
2c6d08d6356db9afa7c5a1c11cd492e6dbbaf94c102369f97a8e76c6b0b1f1cc.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ